Can a SQL Server DBA be restricted from viewing the information in the database?

emmablisa · Feb 16, 2018

Can a SQL Server DBA be restricted from viewing the information in the database?

Because of some data privacy regulations, my company may need to have a DBA work with things like mirroring, index rebuilds, log shipping, clustering general system maintenance things like that while not having access to view the information in the database tables.

This sounds impossible to me, but is it at all possible to give someone access to do anything with a database except view the data included?

JG2828 · Feb 16, 2018

Try adding the user to the db_denydatareader role.
"Members of the db_denydatareader fixed database role cannot read any data in the user tables within a database."

https://technet.microsoft.com/en-us/library/ms187916(v=sql.90).aspx

https://social.msdn.microsoft.com/F...datareader-dbdenydatareader?forum=sqlsecurity

MacGyverS2000 · Feb 17, 2018

Have the DBA work on a test database with the same schema to get the command structure correct, then have someone else execute the commands on the real database.

Though having a DBA who is never allowed to look at the DB they're working on seems a bit short-sighted.

Dan - Owner

http://www.Hi-TecDesigns.com

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Can a SQL Server DBA be restricted from viewing the information in the database?

emmablisa

Computer

JG2828

Electrical

MacGyverS2000

Electrical

Similar threads

Part and Inventory Search

Sponsor